web-clickjacking

SUSPICIOUS: the skill is internally coherent and does not show malware-like installers or credential theft, but it is explicitly an offensive exploitation technique for AI agents. Risk is driven by enabling clickjacking attacks, not by supply-chain or data-exfiltration behavior.